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DESCRIPTION 



INFORMATION RECORDING MEDIUM, INFORMATION RECORDING DEVICE, 
INFORMATION PLAYBACK DEVICE, INFORMATION DELIVERY DEVICE, THEIR 
5 METHODS, THEIR PROGRAMS, AND RECORDING MEDIUM RECORDING PROGRAMS 

THEREON 



Technical Field 

The present invention relates to an information recording medium, an information recording 
10 device, an information playback device, an information delivery device, their methods, their programs 
and a recording medium recording the programs thereon. 



Background Art 

As a recording medium (information recording medium) for recording contents (information, 
15 data) of multimedia data and the like such as music and images, there is used optical disk of DVD 
(Digital Versatile Disc) and the like. In such optical disk, in order to protect the copyright of contents, a 
method, in which flags unique to regions called as region code (regional code) are used to limit regions 
permitted to play the recording medium, is employed. 

That is to say, region codes are provided to both of optical disk and playback device (playback 
20 equipment and playback software), which plays information recorded in the optical disk. When playing 
the optical disk, the playback device reads a region code included in the optical disk, and only when the 
region code agrees with the region code of its own, the playback is permitted; thereby playback regions 
are limited. 

Since the contents recorded on such optical disk are digital data, even when the data are 
25 copied, the data does not deteriorate. Accordingly, once the contents have been copied from the optical 
disk in an unauthorized manner, considerable disadvantage will be caused to the copyright holder. 
Therefore, in addition to the above-described region code for limiting the playback regions, recently the 
following technique has been employed to protect the copyright; that is, the contents themselves 
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recorded on optical disk are encrypted so that, even when the contents are copied in an unauthorized 
manner, the data are prevented from being viewed. 

Specifically, it is arranged so that contents recorded on optical disk are previously encrypted 
using a predetermined encryption key, and the encrypted contents are decrypted using a decryption key, 
5 which is owned by playback device, and played thereby. 

In order to ensure the effectiveness of copyright protection, it is necessary to allow the 
medium side to manage the permission and inhibition of playback of the contents by a particular 
playback device such as a playback device of which decryption key is leaked out, or the like. Therefore, 
it is arranged so that different decryption keys are provided to each of the playback devices, and, in 
10 order to make playback of the contents inhibited (i. e., to make the particular playback device revoked), 
what need to do is to encrypt the content using an encryption key which can not be decrypted by the 
decryption key owned by the particular playback device, and record it on the optical disk. 

Here, such method in which an encryption key has a one-to-one correspondence to the 
contents is available. However, from the needs of security to revoke a particular playback device, or the 
15 like, in the case where it is necessary to use plural encryption keys, every contents, each encrypted with 
respective encryption key, have to be recorded on the recording medium. Therefore, there is a problem 
in the point of recording capacity. 

Therefore, the following method has been employed; that is, a decryption key for decrypting 
the contents is encrypted with another encryption key, and a decryption key for decrypting the 
20 encryption key is previously incorporated in each of the playback devices. 

However, in the case that each of the playback devices is recorded with only one decryption 
key, a content decryption key has to be encrypted with an encryption key, which matches with all 
decryption keys owned by the playback devices, has to be recorded in the optical disk. Even if the size 
of each of the encrypted content decryption keys is small, when the number of the playback devices 
25 becomes large, the data volume also becomes larger. Therefore, it is hardly put to practical use. 

Therefore, in order to reduce the number of the encrypted content decryption keys to be 
recorded in optical disk, plural decryption keys, which are managed in a hierarchical architecture using 
a tree structure or the like, are prepared beforehand; and each of the playback devices is recorded with 



3 



plural decryption keys so that the combination of the decryption keys is different from each other 
among the playback devices. 

By employing the arrangement as described above, the following advantage can be obtained 
That is, even in the case where a decryption key used in a particular playback device is leaked out, when 
5 a new optical disk recorded with the contents is manufactured, by using an encryption key matching 
with a decryption key which is not provided to the particular playback device, it is possible to prevent 
playback of the contents by the particular playback device. Thus, the disadvantage at the leakage of the 
key can be minimized 

In the system as described above, it is possible to reduce the number of the decryption keys for 
10 encrypted contents to be recorded in optical disk. On the other hand, compared to the case where only 

one decryption key is recorded in each of the playback devices, it is necessary to manage a large 

number of keys. That is, the optical disk has to be recorded with decryption keys for contents encrypted 

by encryption keys corresponding to each of the decryption keys. The playback device side also has to 

be recorded with many decryption keys. 
15 As a method for effectively managing the plural keys as described above, the following 

documents 1 and 2 describe a key management system having a tree structure. 

Document 1: D. Naor, M. Naor, and J. Lotspiech, "Revocation and Tracing Scheme for 

Stateless Receivers, " Proceedings of CRYPTO 2001, Lecture Notes in Computer Science, Vol. 2139, 

pp. 41-62, 2001. 

20 Document 2: Nakano Toshihisa, Omori Motoshi, Matsuzaki Natsume, Tatebayashi Makoto, 

"Key Management System for Digital Content Protection -Tree Pattern Division Method-" 
Proceedings of the 2002 Symposium on Cryptography and Information Security, pp. 715-720. 

Document 1 describes a complete sub-tree method, which is a key management system using 
the tree structure. In this method, as shown in Fig. 1, each playback device is allotted to respective leaf 

25 position (a node positioned at the lowermost layer in the tree structure). Also, each node including a 
root (a node positioned at the uppermost layer in the tree structure) and leaves are allotted respectively 
with one encryption key BE* and one decryption key BDj corresponding thereto. The encryption key 
BEi and the decryption key BDj have such relationship that a cipher encrypted using the encryption key 
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BEj can be decrypted by a playback device having a decryption key BDi, which has the same suffix ""; 
and mate with each other on the one-to-one basis. In Fig. 1 , only the decryption key BDj is indicated as 
the representative but the corresponding encryption key BEi is omitted. 

On the other hand, each of the playback devices is previously provided with decryption keys 
5 BDj, which are included in a path from the node, to which the playback device itself is allotted, to the 
root. 

In the example shown in Fig. 1, there are 16 playback devices, and each of the playback 
devices 1-16 has 5 decryption keys BDj. For example, a playback device 4 is provided with 5 
decryption keys BDj, BE>2, BD 4 , BD9, and BD19, which are marked with a circle in Fig. 1. Generally, 
10 the number of the decryption keys BDj owned by a playback device is; log2N+l , assuming that the total 
number of the playback devices is N. 

In the case where playback permission is given to all playback devices 1-16, the medium 401 
is recorded with Encryption (content decryption key AD, encryption key BEi) and Encryption (contents, 
content encryption key AE). Here, the Encryption 0 represents an encryption algorithm; and the 
15 Encryption (argument 1, argument 2) represents a cipher-text, in which the argument 1 is encrypted by 
using the argument 2 as the encryption key. 

Accordingly, the medium 401 is recorded with contents encrypted by the content encryption 
key AE and a content decryption key AD encrypted by the encryption key BEi . Every playback device 
1-16 owns the decryption key BDi corresponding to the encryption key BEj. Accordingly, when 
20 playing the medium 401, each of the playback devices 1-16 decrypts the content decryption key AD 
using the decryption key BDi of its own, and then, decrypts the contents using the content decryption 
key AD to play the contents. 

On the other hand, when revoking particular (one or plural) playback device(s), (namely, to 
set up the medium so that the contents can not be played by the playback device(s)), a new content 
25 encryption key AE 2 for encrypting the contents and a content decryption key AD2 corresponding thereto 
are prepared first, and the contents are encrypted by using the new content encryption key AE2. 

Then, the following sub-trees are created, the sub-trees including the minimum number of the 
playback devices in the sub-trees covering every playback device excluding the playback device to be 



5 



revoked. And the content decryption key AD2 is encrypted by the encryption keys BEj allotted to the 
root of the sub-trees. 

For example, as shown in Fig. 2, when revoking the playback device 4, the content decryption 
key AD2 is encrypted by using decryption keys BD 3 , BD5, BDg and BDig so that the decryption key 
5 owned by the playback device 4 is not included. 

And, the encrypted contents (encrypted contents = Encryption (contents, content encryption 
key AE2)) and the encrypted content decryption key AD 2 (AE>2= Encryption (content decryption key 
AD2, encryption key BE 3 ) | Encryption (content decryption key AE>2 ? encryption key BE5) | Encryption 
(content decryption key AD2, encryption key BEg) | Encryption (content decryption key AD2, 

10 encryption key BEig)) are recorded in the new medium 402. The symbol "|" means that two pieces of 
the data are combined with each other. 

Owing to the above arrangement, the new medium 402 can not be played by the playback 
device 4 but can be played by other playback devices. 

In this case, compared to the case of the medium 401, the number of the encrypted content 

15 decryption keys AD2 to be record in the medium 402 is larger, and the upper limit of the number is 
expressed as rlog2(N/r), assuming that the number of the playback devices to be revoked is V; and the 
total number of playback devices is ,f N M . However, since the data volume of the content decryption key 
is much smaller than that of the contents, it will not be a considerable problem in the point of the storage 
capacity even if the number thereof increases to a certain extent. 

20 The method disclosed in the document 2 is a method called as tree pattern division method. 

In plural nodes in each layer of a tree structure, the node which includes a playback device to be 
revoked in the sub-node thereof is represented by " 1 and the node without the same is represented by 
"0". These values are combined with each other from the left end of the tree structure in order to create 
a node revocation pattern. And these node revocation patterns are allotted with encryption keys 

25 (decryption keys) different from each other. Thereby, the number of the decryption keys owned by the 
playback devices is prevented from increasing as well as the size of the key information to be recorded 
in a recording medium is made smaller. 
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These techniques set forth in the documents 1 and 2 are used for revocation of decryption key 
in specific playback devices without having any connection with the playback control in the limited 
region based on the region code. 

In the case of the prior art which uses the above-described region code, the region code 
5 recorded in the recording medium such as optical disk and the region code of the playback device are 
simply compared to each other to determine whether or not the both agree with each other. 
Accordingly, for example, there resides the following problem. That is, if the region code of the 
medium side or the playback device side is rewritten in an unauthorized manner, or a region code 
comparator in the playback device side is removed therefrom, a medium or a playback device capable 
10 of playback in any region can be obtained relatively easily. 

Also, in the case of the technique which revokes specific playback device using a tree 
structured key management system as set forth in the above documents 1 and 2, the playback function 
based on the limited region like region code is not provided. Accordingly, when limiting the regions 
where playback is permitted, the region code has to be used together. Accordingly, for example, a 
15 problem accompanying the case where the region code is used also arises. 

Further, when the encryption key or the decryption key is broken through, in every recording 
medium, the content decryption key and the content encryption key have to be changed. Accordingly, 
for example, such problem resides in; i.e., countermeasure against the above is hard to be taken. 

20 Disclosure of the Invention 

In view of above-described problems, it is therefore an object of the present invention to 
provide an information recording medium capable of limiting playback regions to enhance the 
copyright protection function, an information recording device, an information playback device, an 
information delivery device, their methods, their programs and a recording medium recording the 
25 programs thereon. 

An aspect of the present invention is to provide an information recording medium recording 
contents encrypted using a content encryption key, and a content decryption key used for decrypting the 
encrypted contents and encrypted by an encryption key for decryption key, wherein the encryption key 
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for decryption key is different for each of the regions preset for at least controlling the permission and 
inhibition of playback of the contents, the content encryption key and the content decryption key are 
established corresponding to each of the regions where the content playback is permitted, or 
corresponding to the combination of the regions where content playback is permitted. 
5 Another aspect of the present invention is to provide an information recording device which 

comprises: a content encryption key inputting section for establishing and inputting a content encryption 
key corresponding to each of the regions where playback of the contents is permitted, or corresponding 
to combination of the regions where content playback is permitted, a content decryption key inputting 
section for establishing and inputting a content decryption key utilized for decrypting the contents 

10 encrypted by the content encryption key, an encryption key for decryption key selecting section for 
selecting an encryption key for decryption key corresponding to the region where playback of the 
contents is permitted, a content encryption section for encrypting the contents utilizing the content 
encryption key, a content decryption key encrypting section for encrypting the content decryption key 
using the.encryption key for decryption key, and a recording section for recording at least the encrypted 

1 5 contents and the encrypted content decryption key to an information recording medium. 

A further aspect of the present invention is to provide an information playback device for 
playing information including contents encrypted utilizing a content encryption key, and a content 
decryption key used for decrypting the encrypted contents and encrypted by an encryption key for 
decryption key, the device comprising: a decryption key storing section storing a decryption key for 

20 decryption key for decrypting the content decryption key encrypted by the encryption key for 
decryption key, a content decryption key decrypting section for decrypting the content decryption key 
by using the decryption key for decryption key, a content decrypting section for decrypting the contents 
by utilizing the content decryption key, and a playback section for playing the decrypted contents; 
wherein the decryption keys for decryption key is different for each of the regions preset for at least 

25 controlling the permission and inhibition of the content playback, the content encryption key and the 
content decryption key are established corresponding to each of the regions where content playback is 
permitted, or corresponding to the combination of the regions where content playback is permitted. 
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Still another aspect of the present invention is to provide an information delivery device which 
comprises: a delivery section for delivering contents encrypted utilizing a content encryption key, and 
content decryption key used for decrypting the encrypted contents and encrypted by an encryption key 
for decryption key. 

5 Still another aspect of the present invention is to provide an information recording method 

which comprises the steps of: obtaining selection information of the regions where playback of the 
contents is permitted, establishing a content encryption key and a content decryption key corresponding 
to the selected regions or the combination thereof, obtaining an encryption key for decryption key preset 
in accordance with the selected region, encrypting the contents utilizing the content encryption key, 

10 encrypting the content decryption key using the encryption key for decryption key, and recording the 
encrypted contents and the encrypted content decryption key to an information recording medium. 

Still another aspect of the present invention is to provide an information playback method for 

» playing information including contents encrypted utilizing a content encryption key, and a content 
decryption key used for decrypting the encrypted contents and encrypted by an encryption key for 

15 decryption, wherein the decryption key for decryption key is different for each of the regions preset at 
least for controlling the permission and inhibition of the content playback, the content encryption key 
and the content decryption key are established corresponding to the each of the regions where content 
playback is permitted or, in accordance with the combination of regions where content playback is 
permitted,; the method comprising the steps of: checking whether or not an information playback 

20 device has a decryption key for decryption key corresponding to the encryption key for decryption key 
encrypting the content decryption key, decrypting the content decryption key using the decryption key 
for decryption key when the information playback device has the corresponding decryption key for 
decryption key, decrypting the contents utilizing the decrypted content decryption key, and playing the 
decrypted contents. 

25 Still another aspect of the present invention is to provide an information recording program, 

wherein the program causes a computer to execute any of the aforesaid information recording methods. 



Still another aspect of the present invention is to provide a recording medium recording an 
information recording program, wherein the aforesaid information recording program is recorded so as 
to be read out by a computer. 

Brief Description of Drawings 

Fig. 1 is a schematic diagram showing a key management system in a prior art of the present 
invention, 

Fig. 2 is a schematic diagram showing a key management system in a prior art of the present 
invention, 

Fig. 3 is a block diagram showing the configuration of a recording device in a first 
embodiment of the present invention, 

Fig. 4 is a diagram showing a data format of a signal SI in Fig. 3, 
Fig. 5 is a diagram showing a data format of the signal S2 in Fig. 3, 
Fig. 6 is a diagram showing a data format of the signal S3 in Fig. 3 5 
Fig. 7 is a diagram showing a data format of the signal S4 in Fig. 3, 
Fig. 8 is a diagram showing a data format of the signal S5 in Fig. 3, 
Fig. 9 is a diagram showing a data format of the signal S6 in Fig. 3, 
Fig. 10 is a diagram showing a data format of the signal S7 in Fig. 3, 

Fig. 11 is a block diagram showing the configuration of a playback device in the first 
embodiment, 

Fig. 12 is a diagram showing a data format of a signal SI 1 in Fig. 11, 

Fig. 13 is a diagram showing a data format of the signal S12 in Fig. 11, 

Fig. 14 is a diagram showing a data format of the signal S13 in Fig. 1 1, 

Fig. 15 is a diagram showing a data format of the signal S14 in Fig. 1 1, 

Fig. 16 is a diagram showing a data format of the signal S15 in Fig. 1 1, 

Fig. 17 is a diagram showing a data format ofthe signal SI 6 in Fig. 11, 

Fig. 1 8 is a schematic diagram showing a key management system in the first embodiment, 

Fig. 19 is a schematic diagram showing a key management system in the first embodiment, 
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Fig. 20 is a flowchart showing a processing step in the recording device of the first 
embodiment, 

Fig. 21 is a flowchart showing a processing step in the playback device of the first 
embodiment, 

5 Fig. 22 is a schematic diagram showing a key management system in a second embodiment 

of the present invention, 

Fig. 23 is a schematic diagram showing a key management system in a third embodiment of 
the present invention, 

10 Fig. 24 is a schematic diagram showing the key management system in the third embodiment, 

Fig. 25 is a schematic diagram showing the key management system in the third embodiment, 

and 

Fig. 26 is a block diagram showing the configuration of a record playback system in a fourth 
embodiment of the present invention. 

15 

Best modes for Carrying out the Invention 

Now, embodiments of the present invention will be described by referring to the 
accompanying drawings. 
[First embodiment] 

20 First, a first embodiment of the present invention will be described by referring to Fig. 3 to Fig. 

21. 

The present embodiment is a record and playback system including a recording device 1 00 as 
an information recording device for recording information (contents) on a recording medium as an 
information recording medium and a playback device 200 as an information playback device for 
25 playing the information on the recording medium. 
[Configuration of the recording device] 
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The configuration of the recording device 1 00 according to the embodiment will be described 
by referring to the block diagram of Fig. 3. The recording device 100 writes contents on a master disk 
101 for optical disk as a recording medium. 

In the recording device 100 shown in Fig. 3, the detail of the cutting method (master disk 
5 manufacturing method) of the master disk 101 and manufacturing method of optical disks and the like 
for playback only of DVD-ROM (Digital Versatile Disc - Read Only Memory) on which information 
is previously recorded using the manufactured master disk 1 01 are well known. Therefore, illustrations 
and detailed descriptions thereof will be omitted here. 

As shown in Fig. 3, the recording device 100 is provided with a data inputting circuit 1 10, a 
10 content decryption key inputting circuit 120 as a content decryption key inputting section, a content 
encryption key inputting circuit 130 as a content encryption key inputting section, a data encryption 
circuit 140 as a content encryption section, a key encryption key inputting circuit 150 as a decryption- 
key encryption key selecting section, a content decryption key encryption circuit 160 as a content 
decryption key encryption section, an error correction circuit 1 70, and a media recording section 1 80 as 
15 a recording section. 

Each of the circuits 1 10, 120, 130, 140, 150, 160 and 170 may be comprised of an exclusive 
hardware respectively. Or the recording device 1 00 may be provided with hardware resources such as a 
central processing unit (CPU) and a main memory, and the function of each circuit may be achieved as 
collaboration between the hardware resources and a program, which is installed into the CPU to be 
20 executed. 

The data inputting circuit 1 10 is a circuit for inputting contents, which is to be recorded on 
optical disk as a recording medium, to the recording device 100. Ordinarily, the contents are various 
kinds of multimedia data such as music and images. However, the contents are not limited to the above, 
but can be ordinary document data or the like. The data inputting circuit 1 1 0 outputs a signal S 1 , which 
25 is the input contents, to the data encryption circuit 140. 

As for the data inputting circuit 1 10, for example, a circuit which reads a recording medium 
such as magnetic tape or DVD-RW recorded with master data of contents and outputs the signal SI ; a 
circuit which accesses a computer recorded with master data of contents via a communication line such 
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as a LAN and the Internet, and downloads the data to read and output the signal SI, and the like are 
available. 

An example of data format of the signal SI is shown in Fig. 4. The signal SI comprises 
contents (data) only. 

5 The content decryption key inputting circuit 1 20 is a circuit which inputs a content decryption 

key ADr for decrypting the contents. The content decryption key inputting circuit 120 outputs the input 
content decryption key ADr as a signal S2 to the content decryption key encryption circuit 160. Here, 
as the content decryption key ADr, values different from each other among the regions where playback 
of the contents is permitted, or among the combinations of the regions, are input. Specifically, when 

10 one or more regions, where playback of the contents is permitted, are selected from preset playback 
permitted regions by a content owner, the content decryption key inputting circuit 120 sets up the 
content decryption key ADr in accordance with the combination of the selected regions (including the 
case where there is only a single region), and outputs the key as a signal S2. 

An example of data format of the signal S2 is shown in Fig. 5. The signal S2 is constituted by 

15 the content decryption key ADr only. 

The playback permitted regions are, like conventional region code, preset to set up the 
permission and inhibition of content playback. Specifically, in accordance with the region code, the 
global regions may be set up as "North America, Japan, Europe, Arab, Southeast Asia, South America, 
Australia, Africa, Russia, South Asia and China." Further, in a more detailed manner, the regions may 

20 be set up based on country or district of country. 

The content encryption key inputting circuit 130 is a circuit for inputting a content encryption 
key AEr. The content encryption key inputting circuit 130 outputs the input content encryption key 
AEr as a signal S3 to the data encryption circuit 140. Here, the content encryption key AEr and the 
content decryption key ADr are set up so that the following relationship is established; i.e., 

25 P=Decryption (Encryption (arbitrary data P, content encryption key AEr), content decryption key ADr). 
Accordingly, like the content decryption key ADr, the content encryption key AE R isalso set up based 
on regions, where playback of the contents is permitted, or combination thereof. 



13 

An example of data format of the signal S3 is shown in Fig. 6. The signal S3 is comprised of 
the content encryption key AEr only. 

Here, the Decryption 0 represents a decryption algorithm. The Decryption (argument 1, 
argument 2) represents the data in which the argument 1 is decrypted by the argument 2 as the 
5 decryption key. Accordingly, the above P represents the data in which a cipher-text of arbitrary data P 
encrypted using the content encryption key AEr is decrypted using the content decryption key ADr. 

The data encryption circuit 140 is a circuit, which encrypts the signal SI (S 1= contents) using 
the signal S3 (S3=content encryption key AEr), and outputs a signal S4 (S4= Encryption (contents, 
content encryption key AEr)). Accordingly, the signal S4 is contents encrypted using the content 
10 encryption key AEr. An example of data format of the signal S4 is shown in Fig. 7. 

The key encryption key inputting circuit 150 is a circuit which inputs encryption key 
(encryption key for decryption-key) BEi for encrypting the content decryption key ADr. Here, the 
encryption keys BEi are different for each of the regions, which are preset to at least manage the 
permission and inhibition of content playback. An encryption key BEj is selected and input in 
1 5 accordance with the regions where playback of the contents is permitted. 

Therefore, in the case where playback is permitted in plural regions, for example, plural 
encryption keys BEj are occasionally input. For example, when N encryption keys of BEj , BE2, . . . , BEj, 
...BE N -i, and BEn are input, the key encryption key inputting circuit 150 outputs a signal S5 (S5= 
encryption key BEi | encryption key BE2 | . . . | encryption key BEi I ... I encryption key BEn-i | 
20 encryption key BEn). Accordingly, the signal S5 is a piece of data, in which plural encryption keys BEj 
input by the key encryption key inputting circuit 150 are combined with each other. An example of 
data format of the signal S5 is shown in Fig. 8. 

The content decryption key encryption circuit 160 is a circuit, which encrypts the signal S2 
(S2= content decryption key ADr) using each of the encryption keys BEi included in the signal S5 and 
25 adds header information of Header (encryption key BEj) thereto and outputs a signal S6. 

Here, the signal S6 = Header(encryption key BEi)|Encryption (content decryption key ADr, 
encryption key BEj) | Header^encryption key BE2) | Encryption (content decryption key ADr, 
encryption key BE 2 ) | ...|Header(encryption key BEi) I Encryption (content decryption key ADr, 
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encryption key BEi) | ... | Header(encryption key BEn-i) | Encryption (content decryption key ADr, 
encryption key BE N -i) | Header(encryption key BEn) | Encryption (content decryption key ADr, 
encryption key BE N ). 

Hereinafter, in order to simplify the expression, the signal S6 is expressed as: signal S6 = 
5 Header (encryption key BEi)|Encryption (content decryption key ADr, encryption key BEi). That is, as 
shown in Fig. 9, the signal S6 is constituted by the content decryption key ADr encrypted using the 
plural encryption keys BEi and the header information Header (encryption key BEi). 

The header information Header (encryption key BEi) is the information used for identifying 
the encryption key BEi. used. 
10 The error correction circuit 170 is a device, which inputs the signal S4 (S4= Encryption 

(contents, content encryption key AEr)) and the signal S6 (S6= Header (encryption key BEi) I 
Encryption (content decryption key ADr, encryption key BEi)), combines them with each other and 
; adds an error correction code thereto, and outputs them as signal S7. 

As shown in Fig. 1 0, the signal S7 is a signal comprised of contents encrypted by the content 
15 encryption key AEr,N content decryption keys ADr encrypted by N encryption keys BEi, header 
information of each of the encryption keys BEi and an error correction code. That is, S7 = Header 
(encryption key BEi) I Encryption (content decryption key ADr, encryption key BEi) I Encryption 
(contents, content encryption key AEr) | ECC. 

Here, ECC stands for an error correction code. Incidentally, the detail of the method for error 
20 correction using the ECC is well-known technique; so, the description thereof will be omitted. 

The media recording section 180 is a device which records the input signal S7 to a recording 
medium such as an optical disk or a master disk for manufacturing optical disks. For example, when 
the master disk 101 is used as the recording medium, a laser oscillator for cutting master disk is used as 
the media recording section 1 80. On the other hand, when a various kinds of optical media, which arc 
25 capable of recording such as DVD-R, DVD-RW, DVD-RAM and CD-R, is used as the recording 
medium, a laser oscillator for recording data is used as the media recording section 1 80. 

Incidentally, as the recording medium on which data are recorded by the media recording 
section 180, when a large amount of optical disks is manufactured, generally, the master disk 101 is 
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used. When a small amount of optical disks is manufactured in a manner of on-demand production or 
the like, a various kinds of recording optical disk is used. 
[Configuration of the playback device] 

Next, a schematic configuration of the playback device 200, which is an information playback 
5 device for playing optical disk as the recording medium recorded with contents, will be described by 
referring to a block diagram shown in Fig. 1 1 and data format diagrams shown in Fig. 12 to Fig. 17. 

The playback device 200 is provided with an information reading section 210, an error 
correction circuit 220, a decryption key storage device 230 as a decryption key storing section, a content 
decryption key decryption circuit 240 as a content decryption key decrypting section, a data decryption 
10 circuit 250 as a content decrypting section and a decoder 260 as a content playback section. The 
playback device 200 plays contents recorded in the optical disk 201 as the recording medium, and 
outputs the contents on an output equipment such as a display and a speaker. 

Here, the optical disk 201 is an optical disk as the recording medium, which is manufactured 
using the master disk 101 of which data is recorded by the recording device 100 as the original; for 
15 example, the optical disk 201 can be a DVD-ROM or a CD-ROM. 

Each of the circuits 220, 240, 250, the decryption key storage device 230 and the decoder 260 
may be constituted by a dedicated hardware respectively. Or the playback device 200 may be provided 
with hardware resources such as a central processing unit (CPU) and a main memory, and the function 
of each section may be achieved as collaboration between the hardware resources and a program, which 
20 is installed into the CPU to be executed. 

The information reading section 210 is a device such as an optical pick-up, which reads out 
the information recorded on the optical disk 201 and outputs a signal SI 1. The signal Sll (SI 1= 
Header (encryption key BEj) | Encryption (content decryption key ADr, encryption key BEO | 
Encryption (contents, content encryption key AE R ) | ECC) is the information read out from the optical 
25 disk 20 1 by the information reading section 2 1 0, and is identical with the signal S7. That is, as shown in 
Fig. 12, the signal SI 1 includes plural content decryption keys ADr encrypted using plural encryption 
keys BEi, the header information of the respective encryption keys BEi, contents encrypted by the 
content encryption key AEr and the error correction code ECC. 
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The error correction circuit 220 is a device, which performs error correction on the input 
signal S 1 1 . The error correction method is, as described above, a well-known technique using the ECC; 
so the description thereof will be omitted 

The error correction circuit 220 separates the signal after the error correction to two signals; i. 
5 e., the signal S12 (SI 2= Header (encryption key BEi) | Encryption (content decryption key ADr, 
encryption key BEi)) and the signal S 1 3 (S 1 3= Encryption (contents, content encryption key AEr)), and 
outputs the signals therefrom. 

Here, as shown in Fig. 13, the signal S12 is identical with the signal S6. That is, the signal 
S12 is a collection of the content decryption key ADr encrypted by the encryption key BEi and the 
10 header information of the encryption key BEi.. 

On the other hand, as shown in Fig. 1 4, the signal S 1 3 is the contents encrypted by the content 
- encryption key AEr, and is identical with the signal S4. 

The decryption key storage device 230 is a device which stores plural kinds of decryption 
keys (decryption key for decryption keys) BDj, BE>2,. . .3Djv . .,BDm-i and BDm, which are owned by 
15 each of the playback devices 200, and the header information Header (decryption key BDj), Header 
(decryption key BD2), Header (decryption key BDj), Header (decryption key BDm_0 and 
Header (decryption key BDm). In this description, it is assumed that M decryption keys are owned. 

The decryption key storage device 230 stores at least one regional decryption key from one or 
more regional decryption keys, which are allotted to each of the playback regions to which the playback 
20 device 200 belongs, and a playback device decryption key allotted to each of the playback devices 200. 

Each of the decryption keys BDj stored in the decryption key storage device 230 is arranged 
so that the relationship of P = Decryption (Encryption (arbitrary data P, encryption key BEi), decryption 
key BDj) is established between the encryption key BEi and the decryption key BDj. 

Also, the values of the headers are predetermined so that the relationship of Header 
25 (encryption key BEi) = Header(decryption key BDj) is established between the header added to the 
encryption key BEi and the header added to the decryption key BDj. 

As shown in Fig. 15, the signal S14, which is output from the decryption key storage device 
230, is provided with "decryption key BDi | decryption key BD2 | . . . | decryption key BDj | . . . | 
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decryption key BDm-i | decryption key BDm" and their header information "Header (decryption key 
BDi) | Header (decryption key BD2) | . . . | Header (decryption key BDj) | . . . | Header (decryption key 
BDm-i) I Header (decryption key BDm)" 

The content decryption key decryption circuit 240 is a circuit which inputs signals S12 and 
5 S14 and determines whether or not the header "Header (encryption key BE*)", which is read out from 
the optical disk 201, and the header "Header (decryption key BDj)", which is owned by the playback 
device 200, agree with each other, and when determined as agree with each other, decrypts the content 
decryption key ADr (ADr = Encryption (content decryption key ADr, encryption key BEO), which is 
encrypted using the decryption key BDj. 
10 That is, the algorithm for decrypting the content decryption key ADr is expressed as: content 

decryption key ADr = Decryption (Encryption (content decryption key ADr, encryption key BE0, 
decryption key BDj). 

This processing is carried out on each of the combinations of i and j until a combination of 
headers which agree with each other is found. When such combination is found and the content 
15 decryption key ADr is decrypted, the content decryption key decryption circuit 240 outputs a signal 

51 5 (S 15= content decryption key ADr ) shown in Fig. 16. When no combinations which agree with 
each other are found, since the content decryption key decryption circuit 240 cannot output the signal 
SI 5, the playback device 200 determines that the optical disk 201, which is presently being read out, 
cannot be played, and every processing is terminated. 

20 The data decryption circuit 250 is a circuit which inputs the signal S13 and the signal S15, 

decrypts the signal SI 3 using the signal SI 5, and outputs Decryption (Encryption (contents, content 
encryption key AEr), content decryption key ADr) = contents, which is the result thereof, as a signal 

5 16 shown in Fig. 1 7. 

The decoder 260 is a circuit, which decodes the input signal S16 (SI 6= contents) and plays 
25 the same. For example, when the playback device 200 is connected to a TV or a display, the played 
contents are output on the TV or the like. 
[Operation of the playback device] 
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Next, the recording operation of contents in the above described playback device 100 will be 
described. 

Before describing concrete operation, a key management system in this embodiment, which 
has a selected region playback managing function of contents, will be described by referring to Fig. 18 
5 and Fig. 19. 

[Key management system with selected region playback managing function] 

In this system, a tree for managing the keys is divided into sub-trees based on playback region, 
and each of the sub-trees is allotted with one playback region. For example, as shown in Fig. 1 8, in the 
case where four playback regions 1 -4 are formed, four sub-trees corresponding to each of the playback 
10 regions are set up. 

Each of the nodes, which includes a root and leaves of each sub-tree, is allotted respectively 
with an encryption key BE* and a decryption key BDj corresponding thereto. Each of the playback 
. . devices is previously provided with decryption keys BDj residing in the path from the leaf, to which the 
playback device itself is allotted, to the root of the sub-tree. 
15 When the encryption key BEi and the decryption key BDj corresponding thereto are in 

common (identical with each other) like the secret key method, one key, which is shared between the 
encryption key BEi and the decryption key BDj, is allotted to each of the nodes. On the other hand, 
when the encryption key BEi and the decryption key BDj are different from each other like the public- 
key method, two kinds of keys of the encryption key BEi and the decryption key BDj are allotted to each 
20 of the nodes. In Fig. 18 and Fig. 19, on the sub-tree, the decryption key BDj only is indicated but the 
encryption key BEi is omitted. 

Here, the encryption keys BE4-BE7 and decryption keys BD4-BD7, which are allotted to the 
root of each sub-tree are common to every playback device included in each of the playback regions. 
Accordingly, in the initial state that no revoked playback device resides in, the above keys function as 
25 regional encryption key and decryption key for identifying the playback regions. 

On the other hand, the encryption keys BE16-BE31 and the decryption keys BD16-BD31, which 
are allotted to the leaves in each sub-trees, are different for each of the playback devices 1-16. 
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Accordingly, the respective keys function as an encryption key and a decryption key of each playback 
device for identifying the respective playback device. 

Also, since each of the encryption keys BE16-BE31 and the decryption keys BD^-BDa^and 
each of the encryption keys BEg-BEisand the decryption keys BDg-BDis residing in the nodes between 
5 the root and the leaves are the keys are all unique respectively having no equivalent to each other, if the 
keys are identified, the playback regions corresponding to the keys are also identified. Therefore, each 
of the keys functions also as the encryption key and the decryption key of the regions. In other words, 
any type of regional encryption keys and regional deciyption keys may be employed if the playback 
regions corresponding thereto can be identified based on the keys. 

10 In the example shown in Fig. 1 8, a binary sub-tree structure is employed as the tree structure. 

The total number of the playback devices is 16; the number of the playback regions is 4; the number of 
the playback devices belonging to each of the playback regions is 4; and the number of the decryption 
keys BDj owned by each playback device is 3. For example, the playback device 4 belonging to the 
playback region 1 has three decryption keys of BD4, BD9, and BD19, which are marked with circles.. 

15 Each of these nodes is allotted with different keys. And it is arranged so that, among the 

playback devices belonging to the same playback region (for example, playback devices 1 and 2), 
common decryption keys (for example, decryption key BD4, and BDg) are provided; but, among the 
playback devices belonging to the playback regions different from each other, (for example, playback 
devices 1 and 5), common decryption keys are not provided. 

20 Assuming that the total number of the playback devices is "N", the number of the playback 

regions is "R", and the same number of the playback devices are included in each of the playback 
regions, then the number of the decryption keys BDj owned by the playback devices is Iog2(N/R)+l . 

For example, when creating a medium 301, which can be played in the playback region 1 
only, recorded in the medium 301 are the contents (the contents = Encryption (contents, content 

25 encryption key AEri)) encrypted by the content encryption key AEri, and the content decryption key 
ADri (ADri = Encryption (content decryption key ADri, encryption key BE*)) encrypted by the 
encryption key BE4 residing at the root of the playback region 1 . 
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On the other hand, when creating a medium 302, which can be played by the playback 
devices 3 and 4 only, recorded in the medium 302 are the contents (the contents^ Encryption (contents, 
content encryption key AEioO) encrypted by the content encryption key AER34, and the content 
decryption key ADR34 (ADr34 = Encryption (content decryption key ADR34, encryption key BE6) | 
5 Encryption (content decryption key ADio*, encryption key BE 7 )) encrypted by the encryption keys BE6 
and BE 7 residing in the roots of the playback regions 3 and 4. 

A pair of the content encryption key and the content decryption key is allotted to each of the 
combinations of arbitrary playback regions. That is, when a medium is limited to the playback region 1 
only, the medium is allotted with the content encryption key AEri and the content decryption key ADri 
10 for the playback region 1 . On the other hand, when a medium is limited to the playback regions 3 and 4 
only, the medium is allotted with the content encryption key AER34 and the content decryption key 
ADr34 for the combination of the playback regions 3 and 4. 

Likewise, according to each of the combinations of playback regions such as playback region . 
2 only, 3 only, 4 only, or playback regions 1, 2,* 3 and 4, one of the pairs of the content encryption key 
15 and the content decryption key is allotted thereto respectively. 

Here, when revoking a specific (plural or a single) playback device(s), which belong(s) to a 
playback region, a revocation processing is made only on a sub-tree, to which the playback device(s) to 
be revoked is/are included. For example, when revoking playback with the playback device 4, as 
shown in Fig. 19, a sub-tree, which covers the playback devices 1-3 excluding the playback device 4 is 
20 formed, and content decryption key AD2R1, which is newly set up (renewed), is encrypted using 
encryption keys BEs and BEjg on the sub-tree, and recorded on the new medium 303. And the contents 
are encrypted by a content encryption key AE2R1 corresponding to the content decryption key AD2R1, 
and recorded on the new medium 303. 

Owing to this arrangement, since the playback device 4 do not have any decryption key 
25 corresponding to the encryption keys BEg and BEigof the medium 303, the playback device 4 cannot 
decrypt the content decryption key AD2R1 of the medium 303, and therefore can not decrypt and play 
the contents. Also, even when any one of the decryption keys BD 4 , BD9 and BD19 is leaked out, the 
medium 303 cannot be played by the leaked key. Accordingly, the copyright of content is protected. 
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In this case, when the content decryption key AD 2 ri and the content encryption key AE 2 ri are 
changed into the keys different from those of the old medium 301, even when the content decryption 
key ADrj is leaked out, the new medium 303 can not be played. 

That is, when a playback device to be revoked is newly found, the content decryption key and 
5 the content encryption key are set up after being changed to new keys. As a result, different content 
decryption key and content encryption key are used depending on the combination of the playback 
devices, which are permitted to play (not revoked) in an region where content playback is permitted. 
Accordingly, when the playback device 1 is also revoked, in addition to the playback device 4, further 
new content decryption key AD 3R i and content encryption key AE3R1 are used. In this embodiment, at 
10 the right side of the suffix R in the symbol of each key, a number of playback region is given, and at the 
left side thereof, a version of the key is given. 

This method has the following characteristics; i.e., based on the region where playback is 
permitted, or in accordance with the combination of the regions, different content decryption key AD R 
- and the content encryption key AEr are used; and further, the sub-trees for managing the decryption 
15 keys BDj and corresponding encryption keys BEj owned by the playback devices are independent from 
each other based on playback region. Accordingly, even when a content decryption key ADr of a 
particular playback region or decryption key BDj owned by the playback device belonging to the 
playback region is leaked out, only the mediums, which are permitted playback in the playback regions, 
are subjected to the influence therefrom, but no influence is rendered to the media, which are permitted 
20 playback in the playback regions other than the above. 

In the example shown in Fig. 1 8 and Fig. 1 9, the medium influenced by the leakage of the key 
owned by the playback device 4 is the medium 301 only that permits playback in the playback regions 
including the playback region 1 . 

Accordingly, the medium 302 limited to the playback regions 3 and 4 has no relationship with 
25 the revocation of the playback device 4; thus, no alteration is required 

In this embodiment, decryption keys BDj different from each other are allotted to each of the 
playback devices. Therefore, the revocation of each playback device can be controlled only by 
changing the encryption key BEj recorded in the medium side; each of the playback devices 1-16 has no 
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relationship with the leakage of its own key. Accordingly, no change is required on the decryption key 
BDjofitsown. 

[Content recording procedure in the recording device] 

Next, the content recording procedures in the recording device 100 of the embodiment will be 
5 described by referring to the flowchart in Fig. 20. 

When recording contents on the master disk 101, first of all, the recording device 100 prompts 
to select the regions where playback of the medium is permitted (step ST1). This selection is ordinarily 
carried out by a content provider (copyright holder) or the like, who creates the medium by inputting 
instructions. 

10 When the regions where playback of the medium is permitted are selected and the recording 

device 100 obtains the selection information, the content encryption key inputting circuit 130 and the 
content decryption key inputting circuit 120 selects (choices) the content encryption key AE R and the 
content decryption key ADr corresponding to the combination of regions which are permitted to play 
(step ST2). For example, in Fig. 18, when the playback regions 3 and 4 are selected, the content 

15 - encryption keys AER34 and the content decryption keys ADR34 corresponding to the combination are 
selected. 

These selected keys are output to the data encryption circuit 140 and the content decryption 
key encryption circuit 160 as the signals S3 and S4. 

Next, the key encryption key inputting circuit 150 prompts to select the playback devices, 

20 which are permitted playback of the objective medium in the regions where playback is permitted (step 
ST3). Ordinarily, this selection is also carried out by the content provider. It may be arranged so that, 
for example, using a display device (output device) such as a display provided to the playback device 
100 and an input device such as keyboard, instructions are given to select every playback device or a 
particular playback device in the regions where playback is permitted. Further, it may be arranged so 

25 that, by storing the information for identifying a playback device, of which decryption key BDj has 
leaked out, and preparing a selection including the playback devices excluding the playback device of 
which decryption key BDj has leaked out, and the user can easily select the playback devices excluding 
that playback device. 
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When the playback regions and the playback devices are selected, the key encryption key 
inputting circuit 150 selects the decryption key BDj and creates a collection of the predetermined 
decryption keys BDj (step ST4). Specifically, in the collection of decryption keys BDj, in which every 
selected playback device has at least one decryption key BDj in the collection; and playback devices, 
5 which are not selected (playback is not permitted), do not have any decryption key BDj in the collection, 
a collection in which the number of the keys is the smallest, is selected. 

Also, accompanying the selection of the decryption key BDj, the key encryption key inputting 
circuit 1 50 selects the encryption key BEi corresponding to the selected encryption key BDj (step ST4). 

The key encryption key inputting circuit 150 outputs the selected encryption key BE* to the 
1 0 content decryption key encryption circuit 1 60 as the signal S5 . 

Receiving the signals S2 and S5, the content decryption key encryption circuit 160 encrypts 
signal S2 (S2= content decryption keys ADr) using the signal S5 (S5= every selected encryption key 
, BEi), and outputs the signal S6 comprised of the encrypted data (the encrypted data = Encryption 
(content decryption key ADr, encryption key BEi)) and the header information of each of the 
1 5 * encryption keys BEi to the error correction circuit 1 70 (step ST5). 

Also, upon receiving the signal SI and the signal S3, the data encryption circuit 140 encrypts 
the signal SI (Sl= contents) using the signal S3 (S3= content encryption key AEr), and outputs the 
encrypted data (the encrypted data = Encryption (contents, content encryption key AEr)) to the error 
correction circuit 1 70 as the signal S4 (step ST6). 
20 Upon receiving the signals S4 and S6, the error correction circuit 1 70 combines the signals S4 

and S6 with each other and adds the error correction code thereto, and outputs the signals to the media 
recording section 1 80 as the signal S7 (step ST7). 

The media recording section 180 records the received signal S7 on the master disk 101 as the 
recording medium (step ST8). 
25 Owing to the above-described steps ST1-ST8, a medium (or a master disk), which can be 

played in the predetermined playback regions and with predetermined playback devices, is 
manufactured. 

[Content playback procedure in playback device] 
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Next, the procedures of playing the medium, which is created by the recording device 100, 
using the playback device 200, will be described by referring to the flowchart in Fig. 2 1 . 

When the optical disk 201 as the recording medium is set up, the playback device 200 reads 
out the information of the optical disk 201 using the information reading section 210, and outputs the 
5 information to the error correction circuit 220 as the signal S 1 1 (step ST 1 1 ). 

Upon receiving the signal SI 1, the error correction circuit 220 performs the error correction 
processing, and outputs the signal S12 (SI 2= Header (encryption key BEO | Encryption (content 
decryption key ADr, encryption key BEi)) and the signal SI 3 (SI 3= Encryption (contents, content 
encryption key AEr)) to the content decryption key decryption circuit 240 and the data decryption 
10 circuit 250 respectively (step ST12). 

The content decryption key decryption circuit 240 compares the Header (encryption key BEi) 
of the signal SI 2 and the Header (decryption key BDj) of M decryption keys BDj stored in the 
decryption key storage device 230, and checks whether or not there are any Headers which agree with 
each other (step ST 1 3). 

15 Here, in the case there are Headers which agree with each other (i.e., in case of Yes), the 

content decryption key decryption circuit 240 decrypts the content decryption key ADr using the 
decryption key BDj stored in the decryption key storage device 230, and outputs the key to the data 
decryption circuit 250 as the signal S15 (step ST14). 

Upon receiving the signal S 1 5, the data decryption circuit 250 decrypts the contents using the 
20 content decryption key ADr, and outputs the contents to the decoder 260 as the signal S 1 6 (step ST1 5). 

Upon receiving the signal SI 6, the decoder 260 plays (decodes) the contents (step ST 16). 
When the playback of the contents completes, the playback processing by the playback device 200 is 
also terminated (step ST17). 

On the other hand, in step ST13, in the case there are no Headers which agree with each other 
25 (i.e., in case of No), since the playback by the playback device 200 is not permitted, the optical disk 201 
terminates the processing without playing the contents (step ST1 7). 
[Effect of the first embodiment] 
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According to the first embodiment, the contents are encrypted using the content encryption 
keys AEr, which are different for each of the combinations of regions where playback is permitted, and 
the content decryption key ADr for decrypting the above is encrypted by plural encryption keys BE*. 
Accordingly, by encrypting the content decryption key ADr using an encryption key BEi corresponding 
5 to a decryption key BDj owned by a playback device only that is permitted playback and recording the 
key in the recording medium, the playback devices permitted to play the contents can be controlled. 

And these encryption keys BEi and decryption keys BDj are set up so as to be different for 
each of the preset regions. Accordingly, by only using an encryption key BEi that is set up in the 
regions where playback is permitted, the limited regional playback control can be carried out without 
10 using any region code. 

Further, by setting up the encryption key BEi appropriately, even to the playback devices 
residing in a region where playback is permitted, the playback can be controlled individually. 

Owing to this arrangement, compared to the conventional method, which performs the 
playback management using the region code only, much higher security can be achieved from the point 
15 of view of copyright protection of the contents,. 

Furthermore, the content decryption keys ADr and the content encryption keys AEr different 
for each of the regions or the combination of the regions where playback is permitted are used, and the 
sub-trees, which manage the decryption keys BDj owned by the playback devices and the 
corresponding encryption keys BEj, are independent from each other within each of the playback 
20 regions. Accordingly, even when a content decryption key ADr in a particular playback region or a 
decryption key BDj owned by a playback device belonging to the playback region is leaked out, no 
influence is rendered to the media or the playback devices, which are permitted the playback in other 
playback regions. Owing to this arrangement, compared to the conventional case set forth in the 
documents 1 and 2, where a tree structure, which is not divided based on playback region, is employed, 
25 and the content encryption keys and the content decryption keys do not differ with the region where 
playback is permitted, preventive measures against the leakage of the key can be taken extremely 
simply. 
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By using two different kinds of encryption keys such as the content encryption key AE R and 
the encryption key BEi, as the protective measures against the leakage of the content decryption keys 
ADr 5 the content decryption keys AD R can be renewed without requiring any changes on the 
decryption keys or the like at the playback device side. 
5 Accordingly, even when content decryption key AD R is leaked out, the protective measures is 

made by just creating a new medium using a new content decryption key AD 2 r. ? and no alteration on 
the decryption key BDj is required at the playback device side. Owing to this arrangement, compared to 
the case where the alteration is required also at the playback device side, the corrective measures against 
the leakage of the content decryption keys ADr can be readily taken; thus, the effectiveness of the 
1 0 copyright protection can be increased. 

Also, even when a decryption key BDj of a playback device is leaked out, by changing the 
record at the medium side, in every playback device in the objective playback regions, only the 
decryption key BDj owned by a particular playback device can be revoked Accordingly, the 
. decryption key BDj enabling the playback can be changed without requiring any alteration at the 
15 playback device side. 

As described above, the playback device at the user side requires no alteration, and the 
preventive measures can be taken at the content supplier side only. Accordingly, the contents can be 
protected much effectively and swiftly. 

According to the embodiment, a selected playback region control is achieved with the key 
20 management system having a modified tree structure without using any region code. In a system which 
uses the key management system employing the tree structure for the purpose of copy protection, when 
the selected playback region control method of the present invention is added thereto, there is no 
devices that require extra addition both at the medium side and the playback device side. Accordingly, 
the control method of the present invention can be introduced thereto extremely easily and at low cost 
25 That is, when using the copy protection system with the key management system having the 

tree structure and the selected playback region control using a flag such as region code together, in 
addition to the key information, the flag has to be added to the medium side, and in addition to the 
processing devices of the key information, a device for identifying the flag has to be provided to the 
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playback device side. Compared to the above, according to the embodiment, at the medium side, only 
the key information is recorded, and the flag does not have to be added; and the playback device side 
also, the deice to process the flag does not have to be provided thereto. Accordingly, the circuits and the 
like can be configured simply; and thus, the cost also can be reduced. Additionally, the selected 
5 playback region control like the case where the conventional flag is used can be achieved as well as the 
copy protection system corresponding to the key management system can be achieved. Thus, the 
copyright protection function equivalent to the conventional method or the higher can be achieved. 

Since the tree structure is divided based on the preset playback region, the number of the 
decryption keys BDj j which are previously owned by the playback device side, can be reduced. That is, 

10 in the conventional key management structure shown in Fig. 1 and Fig. 2, when the number of the 
playback devices is N, each of the playback devices has the decryption keys of log2N+l . On the other 
hand, according to the embodiment, when the number of the playback regions is R, the number of the 
decryption keys BDj owned by each of the playback ' devices can be reduced to logz(N/R)+l. 
. Accordingly, the storage capacity of the decryption key storage device 230 in the playback device 200 

15 can be reduced; thus, the cost for that also can be reduced. 

Depending on the number of the playback regions where playback is permitted at the same 
time, compared to the conventional method, the upper limit of the data amount of the encrypted content 
decryption key ADr (Encryption (content decryption key ADr, encryption key BEj)) to be recorded in 
the medium can be reduced. 

20 That is, when the conventional complete sub-tree method is used as shown in Fig. 1 and Fig. 2, 

the upper limit of the number of the encrypted content decryption keys ADr (Encryption (content 
decryption key ADr, encryption key BEj)) to be recorded in a medium is, assuming that the number of 
the playback devices to be revoked is "r", and the total number of the playback devices is "N", 
expressed as rlog2(N/r). According to the method of the embodiment, the complete sub-tree methods 

25 are used independently from each other based on the playback regions. When the number of the 
playback region where playback is permitted at the same time is one, it is understood that the number of 
the playback devices is reduced from "N M to N/R (R is total number of the playback regions). Owing to 
this, the upper limit of the number of the content decryption key ADr to be recorded in the medium is 
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resulted in rlog2(N/(Rr)). Thus, compared to the conventional method, the number can be considerably 
reduced. 

On the other hand, when there are plural playback regions where playback is permitted at the 
same time, in the initial state (a state that playback device is not revoked in the objective playback 
5 regions), the content decryption keys ADr have to be encrypted using the encryption key BEi allotted to 
the every root of the objective playback regions, and recorded in the medium. Due to this overhead, the 
upper limit of the number of the content decryption keys ADr recorded in each of the media is not 
always reduced. However, generally, compared to the overhead due to the increase of the number of 
the playback regions where playback is permitted at the same time, the overhead due to the increase of 
10 number of the playback devices to be revoked is much larger. Accordingly, in the ordinary operation, 
the increase can be almost negligible. The actual number of the content decryption keys ADr can be 
reduced. 

Assuming that the data amount of the encrypted content decryption key ADr recorded in the 
. medium is constant, the upper limit of the playback device, which can be revoked, can be increased. 
1 5 Accordingly, a large number of playback devices can be revoked. 

Since the medium stores header information also indicating the kind of the encryption key for 
decryption key, by referring to the header information, each of the playback devices can determine 
easily and swiftly whether or not the decryption is possible using the decryption key for decryption key 
owned by each of the playback devices. A higher decryption processing can be achieved. 
20 [Second embodiment] 

Next, a second embodiment of the present invention will be described by referring to Fig. 22. 
The second embodiment is different from the first embodiment in the only point that plural 
tree structures are formed in one region. Other configurations such as the recording device 100 and the 
playback device 200 are identical with those in the first embodiment Therefore, the descriptions about 
25 these configurations will be omitted, and the key management system only will be described 

In this embodiment, the playback region 1 is formed with two tree structures. Like the first 
embodiment, each of the nodes including the root and the leaves of each sub-tree is allotted with one 
encryption key BEj and one decryption key BDj respectively. Each of the playback devices is 
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previously provided with the decryption key BDj residing on a path from the leaf to which the playback 
device itself is allotted to the root of the sub-tree. 

Like the first embodiment, each of the encryption key BEj and the decryption key BDj is a 
unique key respectively, which is different from the encryption key BEi and the decryption key BDj 
5 allotted to each of the nodes, and it is arranged so that no identical key is included among the encryption 
keys BEi and the decryption keys BDj. Accordingly, the keys provided to each of the nodes of the two 
tree structures in the playback region 1 are also the keys different from each other. 

Therefore, the regional encryption key and the decryption key in the playback region 1 
include at least two kinds of keys of the encryption key BE4, BE5 and the decryption key BD 4 , BD 5 
10 respectively allotted to the root of the two sub-trees in the playback region 1 . Accordingly, the medium 
304 for the playback region 1 is recorded with the content decryption key ADri encrypted by the 
encryption keys BE4 and BE5. 

As for the allotting method of the plural tree structures in the playback region 1, in the case 
where, for example, each of the playback regions are set up in a range corresponding to the present 
15 region code, an appropriate method may be set up when carrying out the embodiment in the following 
manner, i.e., the region in a region code may be set up more minutely or on the manufacturer basis of 
the playback device, etc. 

In the playback region 1 , two sub-trees are provided. However, three or more sub-trees may 
be provided. In the other playback regions 2-4 also, two or more sub-trees may be provided. In other 
20 words, it is acceptable when each of the playback regions 1-4 is provided with one or more sub-trees 
(tree structures) to manage the keys. 
[Effect of the second embodiment] 

In the second embodiment also as described above, the same effect as that in the first 
embodiment can be obtained. 
25 Further, as the playback region 1, by providing plural tree structures (sub-trees) in one 

playback region, even when the number of the playback devices disposed in the playback region is 
large, it is possible to reduce the number of layers of the tree structure. Accordingly, the key 
management can be carried out easily. Particularly, in one playback region 1, by dividing the sub-tree 
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based on, for example, country, prefecture! region, or based on the manufacturer of the playback 
devices or the like, the key management can be carried out easily. Accordingly, a user-friendly key 
management system can be provided. 
[Third embodiment] 

5 Next, a third embodiment of the present invention will be described by referring to Fig. 23 to 

Fig. 25. 

The third embodiment is different from the first embodiment in the key management system. 
Other configurations such as the recording device 100 are identical with those in the first embodiment 
Therefore, descriptions about these configurations will be omitted, and the key management system 

10 only will be described. 

The key management system of this embodiment is an application of the tree pattern division 
system set forth in the document 2. As described in the document 2, the tree pattern division system 
. .. allots a key to each of the nodes in each layer in which the node in the tree structure is positioned in 
accordance with node revocation pattern in the layer, which is lower by one layer than the node. 

15 That is to say, as show in Fig. 23, and Fig. 24, at the root (layer 0) of each playback region, a 

key "(mjICoooo-o^Kiiio" corresponding to the pattern for invalidating each node (node 0-3) in the lower 
layer (layer 1) is set up. It should be noted that, as shown in Fig. 24, a number at the left side of "K" 
indicates "layer number-relative node number 55 , and a number of four figures at the right side indicates 
"node revocation pattern". In the node revocation pattern, each figure corresponds to each node 0-3; 

20 and the figure corresponding to a node to be revoked is indicated by "1". In this embodiment, since a 4- 
ary tree structure is employed, the node revocation pattern is also 4-figure (4-bit). In the case of 3 — ary 
tree structure, the numeral is expressed by 3-figure (3-bit). Incidentally, "o^Kim" indicates a case 
where every node is revoked, and in this case, since it is not necessary to set up the key for playback, the 
key therefore is not provided. 

25 By recursively allotting different keys to these revocation patterns in each node of each layer, 

the keys corresponding to each of the revocation patterns are allotted In the layers lower than the layer 
1, the key, which makes every node effective, is expressed by "i-oKoooo" or th e However, to make 
every node effective, since it is achieved by making the nodes in the layer 1 effective using the upper 
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layer, such key is not provided. Also, because of the same reason as the case of the root, the key, which 
revokes every node, is not provided. 

Each of the playback devices has a key corresponding to a pattern, which causes the playback 
device itself to be effective, i.e., not be revoked. For example, in Fig. 24, the playback device 4 has the 
5 following 15 keys (in Fig. 24, keys marked with thick frame). That is, in the keys of the layer 0, the 
keys of 'VoKo***" which causes the node 0 in the layer 1, to which the playback device 4 itself belongs, 
to be effective; i.e., 8 keys (in Fig. 24, keys marked with thick frame) of witch the left end figure in the 
pattern of 4-figure (the figure corresponding to the node 0 in the layer 1) is "0" indicating " effective"; 
and in the keys set up in the node 0 of the layer 1 , the key of "i_oK***o M which causes the playback device 
10 4 to be effective; i.e., 7 keys (in Fig. 24, keys marked with thick frame) of which the right end figure in 
the 4-figure pattern is "0". 

In the tree pattern division system, which is set up as described above, when revoking a 
playback device, the key of a pattern, which revokes the playback device, is selected, and the decryption 
. key is encrypted using the key. For example, as shown in Fig. 25, when revoking the playback devices 
15 4 and 7, from the layer 0, the key 'WCiioo" corresponding to the pattern, which causes the playback 
devices 9-16 only to be effective, is selected; in the layer 1, the keys "uoKoooi" "1-1K0010" 
corresponding to the pattern which revokes the playback devices 4 and 7 in the nodes 0 and 1, are 
selected. 

When the content decryption key AD is encrypted using these keys and recorded in the 
20 medium, since the playback device 9-16 is provided with the decryption key BD corresponding to the 
key M (M)Ki ioo", the content decryption key AD can be decrypted using the key BD; thus, the contents can 
be decrypted. Also, since the playback devices 1-3, 5, 6 and 8 are revoked with respect to the key V 
oKnoo", the contents cannot be decrypted. However, since they are provided with the decryption key 
BD corresponding to the keys "i-oKoooi" and "i-iKooio", the content decryption key AD can be decrypted 
25 using the key BD owned by them; thus, the contents can be decrypt 

As shown in Fig. 23, in this embodiment, the tree structures (sub-trees) as described above are 
provided independently based on playback region, and the keys corresponding to each of the patterns 
are unique keys respectively. Accordingly, the playback regions also can be identified based on any of 
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the keys. Accordingly, each of these keys functions as the regional encryption key and the decryption 
key. 

Like the second embodiment, each of the playback regions may be provided with two or 
more tree structures (sub-trees). 
5 [Effect of the third embodiment] 

In the third embodiment also, content decryption keys AD and content encryption keys AE, 
which are different for each of the regions or combination of the regions where playback is permitted, 
are used; and the decryption keys owned by the playback devices and the sub-trees for managing the 
corresponding encryption keys are independent from each other depending on the playback region. 

10 Even when a content decryption key AD of a particular playback region or a decryption key owned by 
a playback device belonging to the playback region is leaked out, the media or the playback devices, 
which are permitted playback in other playback regions are subjected to no influence. Thus, the same 
working as the first and second embodiments is obtained. 

Further, the tree pattern division system is employed as the key management system. 

15 < Therefore, when revoking a playback device, compared to the above embodiments, it is possible to 
prevent the amount of the keys to be recorded on the medium side from increasing. That is, when 
revoking, in each node from the playback device to be revoked to the root, only one key corresponding 
to pattern is selected. Therefore, even when the number of the playback devices to be revoked is large, 
it is possible to prevent the number of the keys to be recorded on the medium from increasing. 

20 Accordingly, the region for recording the keys can be made smaller, and the recording amount of the 
contents can be made larger. 
[Fourth embodiment] 

Next, a fourth embodiment of the present invention will be described by referring to Fig. 26. 

In the above-described embodiments, the content data are directly encrypted using the content 
25 encryption key, and the encrypted data are directly decrypted using the content decryption key. In the 
record playback system of the fourth embodiment, the content data are encrypted indirectly using the 
content encryption key, and the encrypted data are decrypted indirectly using the content decryption key. 
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In this embodiment, the playback device 500 comprises a title key setting circuit 510 for 
setting up and outputting title key S32, which is set up for every title of the contents S31, a one-way 
function circuit 520 and a content encryption circuit 530. The one-way function circuit 520 is input 
with data S33, which is a part of the contents S3 1 and the title key S32, and outputs the value (data) to 
5 encrypt the content S34. Incidentally, the one-way function circuit 520 is a circuit using a one-way 
function, in which input value can be hardly obtained from the output value. 

The content encryption circuit 530 encrypts the contents S3 1 using the value (data) S34 output 
from the one-way function circuit 520 as the encryption key, and outputs the content encryption data 
S35. 

10 Also, the key managing center 600 comprises a content key inputting circuit 610, a title key 

encryption circuit 620, an encryption key for decryption key inputting circuit 630 and a content key 
encryption circuit 640. 

In accordance with the content playback region, the title key encryption circuit 620 encrypts ;j 
the title key S32 using the content key (content encryption key) S41 input by the content key inputting 
15 circuit 610, and outputs title key encrypting data S42. 

The content key encryption circuit 640 in the key managing center 600 encrypts the content 
key (here, it functions as the content decryption key) S41 using an encryption key for decryption key 
S43, which is input in accordance with the playback regions of the contents and the playback devices, 
which are permitted the playback by the encryption key for decryption key inputting circuit 630 in the 
20 key managing center 600, and outputs contents key encryption data S44. 

Then, the content encryption data S35, the title data key conversion data S33 which is the part 
of data of the contents, the title key encryption data S42, and the content key encryption data S44 are 
recorded on an optical disk 501 or a master disk thereof. 

On the other hand, the playback device 700 is provided with a decryption key storage device 
25 710, a contents key decryption circuit 720, a title key decryption circuit 730, a one-way function circuit 
740 and a content decryption circuit 750. 

The decryption key storage device 710 stores a decryption key for decryption key S51 
corresponding to the playback device 700. Reading out the optical disk 501 , the content key decryption 
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circuit 720 decrypts the read-out content key encryption data S44 using the decryption key for 
decryption key S5 1 . At this time, when the playback device is the playback device 700 with which the 
playback is permitted, the content key decryption circuit 720 succeeds in the decryption. When the 
playback device 700 is not permitted the playback device, since the playback device 700 does not have 
5 the decryption key for decryption key S5 1 corresponding to the encryption key for decryption key S43, 
the playback device 700 fails in the decryption; thus, the contents cannot be decrypted. 

Upon succeeding in the decryption, the content key decryption circuit 720 outputs content key 
data S52. The contents key data S52 is used as the deciyption key in the title key decryption circuit 730 
to decrypt a title key S53. 

10 The decrypted title key S53 and the title key conversion data S33 are input to the one-way 

function circuit 740, which is the same as the one-way function circuit 520, and value S54, which is the 
same as the value S34, is output. 

Then, the content decryption circuit 750 decrypts the contents encryption data S35 using the 
value S54 to output the contents. 
15 [Effect of the fourth embodiment] 

According to the embodiment as described above, in place of encrypting the contents directly 
. using the content encryption key, the contents are encrypted indirectly via the title key and the one-way 
function circuit 520. Accordingly, by changing the title key, the contents encryption data can be readily 
changed. Thus, the copyright protection function can be further enhanced. Particularly, even when the 
20 content key, which is set up based on playback region, is not changed, by changing the title key only, 
the contents encryption data can be changed. Accordingly, the title key can be changed frequently 
based on the kind of the contents; thus, the copyright protection function can be further enhanced. 

The key managing center 600 may be established as an independent organization. Or, the key 
managing center 600 may be incorporated in the recording device 500 side; i.e., a copyright holder 
25 having the contents or a manufacturing company which manufactures the optical disk 50 1 . 
[Modification of the embodiment] 

The present invention is not limited to the above-described embodiment In a range that the 
object of the present invention is achieved, the following modifications are also included. 
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For example, as for the key management system of the encryption key for decryption key and 
the decryption key for decryption key, it is not limited to the key management system described in the 
first and second embodiments or to the tree pattern division system described in the third embodiment 
For example, other key management system such as M the subset difference method" described in the 
5 above document 1 may be employed. 

Also, as for the key management system, it is not always limited to the key management 
system using the tree structure; but other system may be employed. For example, other key 
management system as described below may be employed. That is, by previously preparing 
corresponding information between the encryption key for decryption key and the decryption key set up 
10 in each of the playback devices, and the playback regions to which each of such playback devices 
belongs, each of the content decryption keys are encrypted using the encryption keys for decryption key 
of the respective playback devices belonging to the regions where playback is permitted. In other 
words, it is acceptable when pairs of the encryption key for decryption key for encrypting the content, 
decryption key and the decryption key for decryption key corresponding thereto are at least different 
1 5 from each other among the preset regions. 

In its essence, when carrying out the embodiment, the management system of the encryption 
key for decryption key and the decryption key for decryption key provided to each of the playback 
devices to revoke each playback device can be appropriately selected, it is acceptable when the keys are 
managed at least as different keys among the playback regions. 
20 In the case where the tree structure is employed, corresponding to the number of the playback 

devices to be revoked, the number of the keys used also can be controlled. Particularly, in an initial 
stage that the number of the playback devices to be revoked is small, the number of the keys used is 
very small. Thus, the key management can be carried out easily. 

Further, the configuration of the recording device 100, 500 and the playback device 200, 700 
25 is not limited to the above embodiments. In its essence, it is acceptable when the playback devices can 
encrypt the content data by directly or indirectly using the content encryption keys; and when the 
playback device can decrypt the encrypted data by directly or indirectly using the content decryption 
key. 
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In other words, in this invention, the wording "to encrypt the contents by using the content 
encryption key" means to encrypt the contents by directly or indirectly using the content key. Likewise, 
the wording "content decryption key used to decrypt the encrypted contents" means the key, which can 
decrypt the contents by directly or indirectly applying to the contents. 
5 Furthermore, in the above embodiments, the content encryption key and the content 

decryption keys are arranged based on the regions where playback of the contents is permitted, or in 
accordance with the combination of regions where playback thereof is permitted, and when a playback 
device to be newly revoked is found, the keys are replaced with new ones. The keys may be arranged 
in accordance with the combination of the playback devices, which belong to a playback permitted 

10 region and permitted to play the contents. In this case also, since the playback devices themselves are 
divided based on playback region, the content encryption key and the content decryption key are 
resulted in different keys respectively based on at least playback region or the combination thereof In 
. this case, different from the flowchart in Fig. 20, each of the content encryption keys, the content 
decryption keys and the encryption keys for decryption key are set up after the playback regions and the 

1 5 playback devices are appointed. 

Still further, the recording medium for recording the encrypted contents and the content 
decryption key is not limited to the optical disk. Various kinds of storage medium such as magnetic 
disk, magnetic tape, and memory card may be employed. The media recording section 180 of the 
recording device 100 and the information reading section 210 of the playback device 200 may be 

20 appropriately set up in accordance with the kind of the employed recording medium. 

Still furthermore, the encrypted contents and the content decryption key may be recorded on a 
recording medium such as a magnetic disk, which is incorporated in a content delivery server as the 
information delivery device. By providing a delivery device to the content delivery server for 
delivering the encrypted contents and content decryption key recorded in the recording medium, it is 

25 possible to transmit encryption data of the content and content decryption key to the playback devices 
200, which access thereto via the Internet or LAN. Preferably, each of the playback devices 200 
receives the encryption data, decrypts and plays the data 
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The content encryption key AEr and the content decryption key ADr are set up in accordance 
with the playback regions where playback is permitted or the combination thereof. And it is arranged 
so that, as the case of media 301 and 303, when a playback device to be revoked in the same playback 
region occurs, and when the combination of the playback devices permitted to playback the data is 
5 different from each other, different keys are used. However, it may be arranged so that, in such case 
also that the combination of permitted playback regions is the same and the combination of the 
playback devices to be permitted to playback the data, the different keys are used. 
The kind of the delivered contents is not limited to music data; but images and characteristic 
information such as news may be included. The contents may be appropriately set up corresponding to 
10 the customer needs. The kind of the contents may be appropriately selected when carrying out content 
delivery business. 

The recording device 1 00 is not limited to an exclusive device combined with various kinds of 
a* • hardware^ but may be configured by providing an information recording program to a general purpose 

j&- equipment such as a computer. Particularly, when the recording device 1 00 is configured by combining 

15 the information recording program with a computer having a drive capable of writing on a DVD-R or 
the like, a small amount of information recording media can be manufactured at a low cost 

The playback device 200 is not limited to an exclusive playback equipment such as a DVD 
playback equipment, but may be configured by combining an information playback program with a 
general purpose equipment such as a computer. 
20 That is, as the playback device 200, for example, various kinds of exclusive equipment such 

as portable phone set having various kinds of wireless and/or cable communication functions, PDA 
(Personal Digital Assistant), audio equipment, car audio equipment and general-purpose equipment 
represented by PC are available. 

To constitute the recording device 100 and the playback device 200 using the programs, the 
25 programs are installed in a computer or the like via a communication method as the Internet, or a 
recording medium such as a CD-ROM and a memory card, the CPU is caused to operate by the 
installed program. 
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The playback regions for managing the permission and inhibition of the content playback are 
ordinarily divided in accordance with regions, which are set up geographically such as municipality, 
prefecture, country and continent However, for example, the regions may be set up based on other than 
geography, like the case where the management is carried out so that contents can be played by only a 
playback device of a particular manufacturer. 

As for particular configuration for carrying out the present invention, configuration and/or 
procedures other than the above may be adapted in a range that the object of the present invention is 
achieved. 

Industrial Applicability 

The present invention is applicable to an information recording medium, an information 
recording device, an information playback device, an information delivery device, their method, their 
program and a recording medium recording the program. Particularly, the present invention is 
applicable to optical disks such as DVDs (Digital Versatile Disc) as a recording medium (information 
recording medium) recording contents (information and data) of multimedia data or the like such as 
music and images. 



